Begin setting up UFW

admin/playbooks/01-setup.yml

@@ -10,6 +10,7 @@
       ansible.builtin.package:
         name: curl,python3-pip,python3-pexpect,vim
         state: present
-- import_playbook: 01-setup/setup-valkey.yml
-- import_playbook: 01-setup/setup-postgres.yml
+- import_playbook: 01-setup/setup-base-system.yml
+# - import_playbook: 01-setup/setup-valkey.yml
+# - import_playbook: 01-setup/setup-postgres.yml
 

admin/playbooks/01-setup/setup-base-system.yml

@@ -0,0 +1,19 @@
+---
+- name: Setup Base System
+  hosts: alpha
+  become: yes
+  vars_files:
+    - '{{ inventory_dir }}/vars.yml'
+  tasks:
+    - name: Install UFW
+      ansible.builtin.package:
+        name: ufw
+        state: present
+    - name: Allow Access to Named Applications
+      community.general.ufw:
+        rule: allow
+        name: '{{ item }}'
+        delete: true
+      loop:
+        - OpenSSH
+        - WWW Full